CVE-2023-32785 in LangChain

Sumário

de VulDB • 29/05/2026

In Langchain through 0.0.155, prompt injection allows execution of arbitrary code against the SQL service provided by the chain.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservar: 15/05/2023
• Divulgação: 25/10/2023
• Moderação: aceite
• Entrada: VDB-243107
• CPE: pronto
• CWE: CWE-74 (confirmado)
• CVSS: 9.8 (NVD)
• EPSS: 0.00000
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-32785
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-32785
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-32785/